Frank Brehm's Git Trees - pixelpark/hiera.git/blob

   1 ---
   2 infra::role: base
   3 infra::additional_classes:
   4   - infra::profile::mysql_server
   5   - infra::profile::apache_php
   6
   7 mysql::server::root_password: ENC[PKCS7,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]
   8 mysql::server::backup::backuppassword: ENC[PKCS7,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]
   9 infra::profile::mysql_server::databases:
  10   mercedes_ecard:
  11     user: mercedes_ecard
  12     password: ENC[PKCS7,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]
  13
  14 infra::profile::apache::htdigest:
  15   server:
  16     www: ENC[PKCS7,MIIBeQYJKoZIhvcNAQcDoIIBajCCAWYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEATfeqDHFdDjuRDCtsARPCaQWRiVeRmmYXT2KOSD6ad1s4vs2g+2kDi2hq0jj/AMLY6mCLB3+uRPPIQD4//zwHADNHeBWv6I465Rbvhpr22aFPt2pXjBWypB72uqtwo+Lu1ibBDPtJnozwxO8TYyQmCKmdy2o/Iq73lJLqbCdCHwNzV5q0aoMw6Xr4ogrFDXlQXZvZA9L9HnASmMQVG4yopsW3P/lmM1wUElBHMhjHjHIjKvOEOEp/u4oKboFf+sI6dCm02EV2qV9iBh3cB563fJb3ziFMqMpogUNa2yiDWOWefWkQG2nYTR/unlFSGryArGze2GCxQScfTlqmvJyeZTA8BgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBAs/bQmwAZZ6rGvmET7++7kgBCfIBV6Lmnu1jM7qScq7hDN]
  17
  18 accounts::users:
  19   labworks:
  20     uid: 60174
  21     apply: true
  22     group: apache
  23
  24 repo::remi_php56: true
  25
  26 php::extensions:
  27   opcache: {}
  28   mbstring: {}
  29   mysqlnd: {}
  30
  31 infra::profile::apache_php::fpm_pool:
  32   christmas:
  33     listen_owner: apache
  34     listen_group: apache
  35
  36 php::fpm::pools:
  37   www:
  38     ensure: absent
  39
  40 apache::default_vhost: false
  41
  42 infra::profile::apache::pp_vhosts:
  43   christmas:
  44     docroot: /var/www/christmas
  45     servername: christmas-greetings.vans.mercedes-benz.com
  46     # es werden LB und WAF verwendet - SSL Certs liegen im Loadbalancer
  47     ssl: false
  48     docroot_owner: apache
  49     docroot_group: apache
  50     docroot_mode: '0775'
  51     directories:
  52       - directory_root:
  53         provider: directory
  54         path: '/var/www/christmas'
  55         addhandlers:
  56           - { handler: "proxy:unix:/var/run/php5-fpm-christmas.sock|fcgi://./" , extensions: '.php' }
  57         options:
  58           - FollowSymLinks
  59           - MultiViews
  60         allow_override:
  61           - All
  62         directoryindex: 'index.php'
  63       - location_admin:
  64         provider: location
  65         path: '/admin'
  66         auth_type: Digest
  67         auth_name: server
  68         auth_digest_provider: file
  69         auth_digest_algorithm: MD5
  70         auth_user_file: '/etc/httpd/htdigest'
  71         auth_require: 'valid-user'
  72     rewrites:
  73       - alias:
  74         comment: 'Weiterleitung auf echte URL'
  75         rewrite_cond:
  76           - '%%{ich-trickse}{HTTP_HOST} !^christmas-greetings\.vans\.mercedes-benz\.com$ [NC]'
  77         rewrite_rule:
  78           - '^(.*)$ https://christmas-greetings.vans.mercedes-benz.com$1 [L,R=301]'
  79       - alias1:
  80         comment: 'Weiterleitung auf https'
  81         rewrite_cond:
  82           - '%%{ich-trickse}{HTTP:HTTPS} !=on [NC]'
  83         rewrite_rule:
  84           - '^(.*)$ https://christmas-greetings.vans.mercedes-benz.com$1 [L,R=301]'
  85     setenvif_ssl:
  86       - 'HTTPS on HTTPS=on'
  87     access_log_format: lb_combined